A vulnerability (CVE-2026-35228) exists in the Oracle MCP Server Helper Tool versions 1.0.1 through 1.0.156. This flaw allows an unauthenticated attacker with network access via HTTP to execute malicious SQL commands on the affected tool. The vulnerability is classified as high severity with a CVSS score of 8.7.